Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/323830343a343965383a3a2f33322d3336203d3e20323637323038.roa
File:                     323830343a343965383a3a2f33322d3336203d3e20323637323038.roa (raw, json)
Hash identifier:          nhdzDMGYxTI2PDdPnUvRcGPUL5Zl47tpWRjnJYZc/VE=
Subject key identifier:   48:8F:9A:D7:85:9A:68:51:E9:8B:09:92:27:E0:73:6C:84:22:1A:AF
Certificate issuer:       /CN=0C0961EF01266C16C5F1B9EDA9E4F9407BD16426
Certificate serial:       2E9A54BCB4F2B249E67FBCC60E8C608A166D01F2
Authority key identifier: 0C:09:61:EF:01:26:6C:16:C5:F1:B9:ED:A9:E4:F9:40:7B:D1:64:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/323830343a343965383a3a2f33322d3336203d3e20323637323038.roa
Signing time:             Thu 04 Apr 2024 07:31:03 +0000
ROA not before:           Thu 04 Apr 2024 07:26:03 +0000
ROA not after:            Thu 03 Apr 2025 07:31:03 +0000
asID:                     267208
IP address blocks:        2804:49e8::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9a:54:bc:b4:f2:b2:49:e6:7f:bc:c6:0e:8c:60:8a:16:6d:01:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C0961EF01266C16C5F1B9EDA9E4F9407BD16426
        Validity
            Not Before: Apr  4 07:26:03 2024 GMT
            Not After : Apr  3 07:31:03 2025 GMT
        Subject: CN=488F9AD7859A6851E98B099227E0736C84221AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a2:b7:cf:60:39:11:8d:a5:e8:6b:bd:b7:05:
                    7d:0a:a6:87:1b:de:4b:1c:59:e7:f1:cf:4b:aa:a1:
                    75:d3:f4:f3:c9:0d:c5:5c:f4:72:95:fe:09:cc:f2:
                    73:1a:50:c3:d3:c3:bc:6b:f1:11:08:22:f6:74:5f:
                    20:d7:15:e0:3c:e8:2b:c2:b8:b6:0e:0b:5d:23:fb:
                    07:60:2f:34:f0:5c:fa:75:3f:ba:2a:2c:85:63:28:
                    8a:95:ee:2f:46:41:89:97:32:0f:b1:27:83:8b:2a:
                    7a:a5:1d:5d:41:01:eb:ad:d6:07:13:7f:db:5f:af:
                    b5:5e:d9:b9:1b:77:56:d1:dd:39:3c:ac:75:2c:b0:
                    c8:dc:b3:1b:1a:ec:33:d3:cf:a6:c6:f8:58:1f:c1:
                    8d:b3:42:6f:84:2e:c4:6e:8d:f5:f5:c0:7b:cb:60:
                    0d:41:ca:4c:7c:dc:c4:5e:1d:98:e5:ba:10:57:ae:
                    c9:b6:4c:86:96:2b:39:bf:ef:b2:6c:44:82:82:35:
                    ba:6a:d9:9f:64:c1:37:cd:ac:53:a0:aa:db:8c:31:
                    3b:df:03:c6:a3:c9:57:53:e5:98:68:cb:e5:91:7b:
                    ee:99:27:1d:8c:72:81:f0:ee:46:ec:c4:7e:52:6a:
                    b1:70:0f:28:16:2c:d5:6f:48:56:fc:ac:7b:8c:3e:
                    5b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8F:9A:D7:85:9A:68:51:E9:8B:09:92:27:E0:73:6C:84:22:1A:AF
            X509v3 Authority Key Identifier:
                keyid:0C:09:61:EF:01:26:6C:16:C5:F1:B9:ED:A9:E4:F9:40:7B:D1:64:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C0961EF01266C16C5F1B9EDA9E4F9407BD16426.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiCxpvPYm4Nbh3cpxuUHr6zdAMSafP7nhQK8Tm3DUgMs/1/323830343a343965383a3a2f33322d3336203d3e20323637323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:49e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:8e:80:33:a7:2c:85:76:eb:d0:a9:6a:e4:89:ce:2d:9c:8e:
         7a:de:b5:e7:7a:2a:6f:c5:a4:f5:3a:d4:75:7b:24:72:b6:20:
         49:50:7c:c7:ea:94:ed:b9:69:68:c4:c6:49:a0:3f:36:05:0c:
         a2:ea:d3:98:10:50:ec:87:48:ed:b0:e3:1f:75:69:53:e4:d2:
         d4:fc:da:05:fe:24:82:84:93:21:95:ab:d6:d5:ea:2a:1f:51:
         f2:42:4f:cf:ba:c8:e8:72:56:ee:fb:32:3b:1e:af:b8:4b:29:
         4a:1d:56:b8:b5:0d:43:71:0f:ea:ed:37:24:a7:e6:01:da:54:
         cb:2c:61:60:2c:8b:b8:02:66:fc:32:de:f8:8b:02:fe:57:51:
         09:66:45:48:ec:f6:24:52:91:38:09:e7:16:75:1a:29:b6:d0:
         4a:30:98:b1:33:0e:b9:ed:a6:3b:82:fe:96:0f:8d:88:74:6a:
         01:68:6e:d1:68:3c:a4:3d:81:1d:dd:0c:c3:a8:29:b1:35:84:
         de:ed:13:15:fd:43:5b:9f:13:0f:a3:7c:f4:7f:23:89:3f:7c:
         7c:60:0a:1d:6c:93:b4:88:5a:74:38:83:18:5e:6c:8b:5a:96:
         19:7e:0f:11:25:d6:89:19:73:f2:53:e4:70:b6:e4:b4:a4:f5:
         9c:15:34:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org